Systems and techniques to perform card functions in a computer environment

Abstract

Disclosed herein are systems and methods to perform card functions in a computer environment. In some embodiments, a switchboard node is provided. The switchboard node receives a request to establish a validation session. The validation session is established and encrypted data from a contactless card is validated by a validator. Once the encrypted data is validated, the switchboard node requests that an issuer server completes a requested function. The issuer completes a portion of the function and then encrypts a message to a merchant indicating to the merchant that the function is complete. The encrypted message is received and decrypted by the merchant and the merchant completes the remainder of the function in communication with a user device.

What is claimed is: 
     
         1 . A method comprising:
 receiving, at a server, a first request to perform a function, the first request being associated with a user account associated with a contactless card;   transmitting, by the server to a switchboard node, a validation session request to initiate a validation session for the contactless card;   receiving, at the server, a response, including a nonce, from the switchboard node;   transmitting, by the server to a user device associated with the user account, the nonce, wherein the user device is to send the nonce to the contactless card during a near field near-field communication (NFC) exchange with the contactless card;   receiving, at the server from the contactless card, via the user device, encrypted data, the encrypted data including the nonce;   transmitting, by the server to the switchboard node, the encrypted data, including the nonce, wherein the switchboard node is configured to forward the encrypted data to a validation server to validate the encrypted data;   receiving, by the server from the validation server, a notification that the encrypted data is validated; and   performing, by the server, the function as defined in the first request.   
     
     
         2 . The method of  claim 1 , wherein:
 the nonce is an identifier that is unique to the validation session; and   the nonce differentiates the validation session from other validation sessions granted by the switchboard node.   
     
     
         3 . The method of  claim 1 , wherein the switchboard node is a server operating within a switching network configured to receive at least validation session requests and encrypted data, respond to the validation session requests, and forward the encrypted data to an appropriate validation server configured to validate the encrypted data. 
     
     
         4 . The method of  claim 1 , further comprising:
 receiving, at the server from the switchboard node, a request to negotiate with the issuer server to generate a temporary key;   negotiating, by the server, with the issuer server to generate an Elliptic-curve Diffie-Hellman (ECDH) public/private key pair, the temporary key including the public/private key pair; and   sending, by the server, the public key to the issuer server.   
     
     
         5 . The method of  claim 4 , wherein the confirmation received from the issuer server is encrypted using the ECDH public key by the issuer server, and the method further comprises:
 decrypting, by the server, the encrypted confirmation using the private key.   
     
     
         6 . The method of  claim 1 , wherein the response from the switchboard node includes terms of service for the function and a terms of service version identifier; and
 wherein the method further comprises:   sending, by the server, the terms of service to the user device; and   receiving, by the server from the user device, a message indicating that the terms of service have been accepted.   
     
     
         7 . The method of  claim 1 , wherein the first request to perform the function includes at least one selected from the group of:
 a request to perform an autofill function;   a request to execute a transaction;   a request to login in to an account;   a request to actuate a controller; and   a request to establish a virtual private network (VPN).   
     
     
         8 . A switchboard node comprising:
 a processing circuit; and   a memory containing instructions which when executed by the processing circuit, cause the processing circuit to:   receive, from a user device, a request for a first validation session, the first validation session being associated with a function request from a user account associated with a contactless card;   establish the first validation session and, as part of establishing the first validation session, generate a unique nonce associated with the first validation session to distinguish the first validation session from any other validation sessions;   transmit the nonce to the user device;   receive a reply from the user device, the reply comprising encrypted data from the contactless card and the nonce to indicate the encrypted data is associated with the first validation session;   transmit the encrypted data to a validation server to validate the encrypted data;   receive, from the validation server, an indication that the encrypted data has been validated, the indication including a validation token; and   transmit, to an issuer server, the validation token along with instructions to complete a function associated with the function request.   
     
     
         9 . The switchboard node of  claim 8 , wherein as part of establishing the first validation session, the processing circuit is further caused to transmit a session token signed with a switchboard node private key and a terms of service acknowledgement request to the user device, wherein the nonce is contained within the session token. 
     
     
         10 . The switchboard node of  claim 9 , wherein the processing circuit is further caused to receive, from the user device, a message indicating the terms of service are accepted by a user of the user account. 
     
     
         11 . The switchboard node of  claim 8 , wherein the processing circuit is further caused to:
 initiate a key negotiation between the issuer server and a merchant server associated with the function request,   wherein the issuer server and the merchant server are configured to exchange keys to decrypt messages communicated therebetween.   
     
     
         12 . The switchboard node of  claim 11 , wherein the processing circuit is further caused to:
 receive confirmation from the issuer server that the function has been completed; and   send the confirmation to the merchant server that the function has been completed.   
     
     
         13 . The switchboard node of  claim 8 , wherein the user device is to send the nonce to the contactless card during a near field near-field communication (NFC) exchange between the user device and the contactless card; and
 wherein the contactless card is to send the encrypted data to the user device during the NFC exchange.   
     
     
         14 . The switchboard node of  claim 8 , wherein the function request includes at least one selected from the group of:
 a request to perform an autofill function;   a request to execute or approve a transaction;   a request to login in to an account;   a request to actuate a controller; and   a request to establish a virtual private network (VPN).   
     
     
         15 . A non-transitory computer-readable storage medium having instructions stored thereon, which when executed by a processor cause the process to:
 receive a request for a first validation session, the first validation session being associated with a function request from a user device associated with a contactless card;   establish the first validation session and, as part of establishing the first validation session, generate a unique nonce associated with the first validation session to distinguish the first validation session from any other validation sessions;   transmit the nonce to the user device for the user device to send to the contactless card during a near field near-field communication (NFC) exchange between the user device and the contactless card;   receive a reply from the contactless card via the user device, the reply comprising encrypted data and the nonce to indicate the encrypted data is associated with the first session;   transmit the encrypted data to a validation server to validate the encrypted data;   receive, from the validation server, an indication that the encrypted data has been validated, the indication including a validation token; and   send, to an issuer server, the validation token along with instructions to complete a function associated with the function request.   
     
     
         16 . The non-transitory computer-readable storage medium of  claim 15 , wherein as part of establishing the first validation session, the processor is further caused to transmit a session token signed with a switchboard node private key and a terms of service acknowledgement request to the user device, wherein the nonce is contained within the session token. 
     
     
         17 . The non-transitory computer-readable storage medium of  claim 16 , wherein the processor is further caused to receive, from the user device, a message indicating the terms of service are accepted by a user of the user device. 
     
     
         18 . The non-transitory computer-readable storage medium of  claim 15 , wherein the processor is further caused to:
 initiate a key negotiation between the issuer server and a merchant server associated with the function request, wherein the issuer server and the merchant server are configured to exchange keys to decrypt messages communicated therebetween.   
     
     
         19 . The non-transitory computer-readable storage medium of  claim 15 , wherein the processor is further caused to:
 receive confirmation from the issuer server that the function has been completed; and   send the confirmation to the merchant server that the function has been completed.   
     
     
         20 . The non-transitory computer-readable storage medium of  claim 15 , wherein the function request includes at least one selected from the group of:
 a request to perform an autofill function;   a request to execute or approve a transaction;   a request to login in to an account;   a request to actuate a controller; and   a request to establish a virtual private network (VPN).